MDAC Auto-Filler

Auto-fill and submit Malaysia Digital Arrival Card (MDAC) for travelers entering Malaysia. Use when a user wants to fill or submit MDAC (马来西亚数字入境卡) for Malay...

What you should consider before installing or running this skill: - The skill intentionally bypasses the MDAC slider CAPTCHA by patching client-side code and simulating human mouse movement. Although this matches the stated purpose, bypassing CAPTCHAs may violate the target site's terms of service or local laws — proceed only if you accept that risk. - The script runs a real browser (Playwright + Chromium) locally and injects JS into the official MDAC site; it does not contact third-party servers. Still, review the code yourself if you can and run it on a machine you control. - Protect your sensitive data: do not pass passport or personal data on the command line (use --file as recommended) and set file permissions (chmod 600). Be aware command-line arguments may appear in process lists and shell history. - Running automated submissions can lead to IP blocking or other countermeasures by the site. Expect potential rate limits or blocks if used repeatedly. - If you are unsure about legal or policy implications, consult the MDAC site's terms or local guidance before using an automated bypass. If you want additional assurance, ask for a line-by-line walkthrough of the script or request that the author replace the CAPTCHA bypass with a user-assisted step (prompt the user to solve the slider manually) to avoid automated evasion.

Type: OpenClaw Skill Name: mdac-filler Version: 1.0.2 The skill automates the Malaysia Digital Arrival Card (MDAC) submission process, which involves handling highly sensitive traveler information (passport numbers, DOB, and contact details). It implements a CAPTCHA bypass in `scripts/fill_and_submit.py` by hooking the target website's AJAX calls (`$.ajax`) and reading internal JavaScript state to determine the slider's correct position. While these capabilities are directly aligned with the stated purpose and no evidence of data exfiltration or malicious intent was found, the combination of PII handling and the bypass of security controls constitutes a high-risk behavior.